基于Burp插件开发打造渗透测试自动化
☆422Dec 7, 2021Updated 4 years ago
Alternatives and similar repositories for BurpExtend
Users that are interested in BurpExtend are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp被动扫描流量转发插件☆1,459Jun 17, 2024Updated last year
- domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等☆2,118Mar 3, 2026Updated 3 weeks ago
- Burp suite 的插件集合☆240Mar 13, 2021Updated 5 years ago
- 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具☆740Dec 8, 2022Updated 3 years ago
- 红队作战中比较常遇到的一些重点系统漏洞整理。☆2,519Jul 17, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- burp插件开发指南☆619Aug 8, 2021Updated 4 years ago
- SRC子域名资产监控☆1,298Jan 14, 2021Updated 5 years ago
- 用于记录内网渗透(域渗透)学习 :-)☆1,239Nov 9, 2020Updated 5 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆728Mar 21, 2022Updated 4 years ago
- 输入域名>爆破子域名>扫描子域名端口>发现扫描web服务>集成报告的全流程全自动扫描器。集成oneforall、masscan、nmap、dirsearch、crawlergo、xray等工具，另支持cdn识别、网页截图、站点定位；动态识别域名并添加功能、工具超时中断等☆807Mar 13, 2024Updated 2 years ago
- 一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH…☆1,106Oct 9, 2021Updated 4 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。☆1,192Apr 30, 2019Updated 6 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,015May 21, 2024Updated last year
- BurpBounty 魔改版本☆418Mar 21, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- 边界打点后的自动化渗透工具☆1,893Jul 19, 2021Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,029Feb 23, 2022Updated 4 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆946Jun 14, 2023Updated 2 years ago
- GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用☆714May 6, 2021Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入☆772Jan 26, 2022Updated 4 years ago
- 各种数据库的利用姿势☆1,033Jan 3, 2025Updated last year
- 递归式寻找域名和api。☆722Aug 3, 2023Updated 2 years ago
- 一款基于BurpSuite的被动式FastJson检测插件☆1,238Oct 1, 2022Updated 3 years ago
- 无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。☆403Dec 21, 2025Updated 3 months ago
- Wordpress hosting with auto-scaling on Cloudways • AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.☆1,089Updated this week
- 各种工具指纹收集分享☆529Nov 3, 2021Updated 4 years ago
- 高危漏洞精准检测与深度利用框架☆1,458Jan 8, 2023Updated 3 years ago
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,634Jun 16, 2024Updated last year
- 一款基于BurpSuite的被动式shiro检测插件☆1,798Dec 14, 2022Updated 3 years ago
- SpringScan 漏洞检测 Burp插件☆606Nov 14, 2023Updated 2 years ago
- Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload☆896May 28, 2021Updated 4 years ago
- Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）☆1,389Dec 16, 2022Updated 3 years ago
- Java RCE 回显测试代码☆1,015Oct 15, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Passive Security Scanner (被动式安全扫描器)☆1,950Feb 8, 2023Updated 3 years ago
- shiro 反序列 命令执行辅助检测工具☆1,566May 21, 2024Updated last year
- Shiro550/Shiro721 一键化利用工具，支持多种回显方式☆1,953Jun 4, 2021Updated 4 years ago
- bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统☆1,510Nov 22, 2022Updated 3 years ago
- Shiro反序列化回显利用、内存shell、检查 Burp插件☆217Sep 1, 2022Updated 3 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆388Feb 24, 2022Updated 4 years ago
- 一些关于渗透测试的Tips☆611Dec 19, 2022Updated 3 years ago